Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/AinDi0r_pwEk6mCxE0njxNZxBiI.roa
File: AinDi0r_pwEk6mCxE0njxNZxBiI.roa (raw, json)
Hash identifier: 7wNEj+gPLvZc3ktGRx4vANcBO5bg3pmBW/zLMTp0Z2M=
Subject key identifier: 02:29:C3:8B:4A:FF:A7:01:24:EA:60:B1:13:49:E3:C4:D6:71:06:22
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0184EE769951A997E1285262BC5A8243C10A
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/AinDi0r_pwEk6mCxE0njxNZxBiI.roa
Signing time: Wed 07 Dec 2022 21:21:00 +0000
ROA not before: Wed 07 Dec 2022 21:21:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207279
IP address blocks: 185.218.22.0/24 maxlen: 24
185.126.83.0/24 maxlen: 24
185.228.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ee:76:99:51:a9:97:e1:28:52:62:bc:5a:82:43:c1:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 7 21:21:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0229c38b4affa70124ea60b11349e3c4d6710622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:00:d5:a2:b3:04:57:66:ce:b4:ab:17:40:7a:
02:31:bc:f4:ae:1b:e9:78:80:a2:58:fb:e2:c9:3f:
52:f2:67:5c:8f:58:5d:32:b0:0a:fd:e9:ea:39:0c:
f3:2b:98:0c:09:2c:47:53:68:21:39:24:34:d6:2c:
71:a3:16:c2:75:18:ec:a8:6a:94:06:46:e7:8f:c7:
86:81:7d:91:2f:15:af:91:30:41:75:db:d9:74:17:
64:66:f5:6c:25:21:a4:6d:1b:8c:d5:75:a5:05:14:
e9:5c:8c:3a:ee:3c:74:4e:fd:60:e7:45:7e:b1:cb:
e9:bd:01:64:5d:f4:f2:c8:74:2e:0c:ec:a1:0d:5a:
74:10:4f:48:89:22:cd:cf:86:65:3b:d1:19:cc:3d:
f9:55:61:e8:42:77:8d:45:81:23:02:3c:6e:d0:26:
63:1c:04:b4:3d:18:52:61:e8:5f:0b:2a:35:d3:77:
02:db:0f:cf:6b:74:44:c9:e7:f9:aa:72:09:54:a5:
15:9a:96:65:42:b4:9b:b6:8f:44:b3:55:bd:6e:8c:
46:ce:b7:4d:35:d3:f3:15:fc:c8:47:16:3f:32:ff:
bd:30:02:b0:f6:80:a9:67:bd:f1:40:33:6f:2c:21:
ac:3c:bb:1e:4b:94:56:00:da:85:71:7b:42:74:c0:
70:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:29:C3:8B:4A:FF:A7:01:24:EA:60:B1:13:49:E3:C4:D6:71:06:22
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/AinDi0r_pwEk6mCxE0njxNZxBiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.83.0/24
185.218.22.0/24
185.228.73.0/24
Signature Algorithm: sha256WithRSAEncryption
45:21:75:83:a3:62:15:3f:be:5d:30:90:aa:6f:3a:26:08:d4:
f3:af:6c:ed:ba:82:89:6a:d6:b5:98:80:37:9f:7f:4a:0f:5c:
dc:84:d7:dc:87:3c:ac:43:26:59:44:c5:87:74:77:95:81:60:
15:e0:c7:7b:59:41:ce:ca:c4:67:ae:e6:c9:4d:01:e5:42:75:
c3:8b:bd:70:51:cd:e1:13:0d:69:b8:d0:af:32:47:88:e6:d1:
c1:d5:29:16:6d:56:11:82:ab:80:7b:df:ca:2a:0b:b5:1f:2b:
9f:66:d3:52:2c:27:6e:44:a2:59:e5:80:66:86:96:8e:f0:f6:
94:fa:c3:0d:35:12:1e:bf:fd:2c:f7:1c:c1:4c:53:1f:0d:d4:
79:d3:4f:91:2d:8b:d5:72:92:5b:3c:09:2a:3d:41:60:29:92:
79:2c:67:8a:48:07:03:24:d9:5e:91:80:3d:da:2a:57:85:eb:
57:1b:01:49:53:8b:86:32:ca:c7:2f:34:6a:5a:29:07:1b:d7:
05:26:2f:0e:e3:4c:be:19:0f:30:ed:bc:68:b1:d8:bf:a4:46:
9e:7f:3d:90:08:ae:c1:7d:18:a3:3e:f4:1a:d2:2f:9a:15:b9:
d0:3b:62:bd:12:99:fe:11:0f:90:a5:d0:c2:2e:af:32:d1:ec:
91:80:47:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org